Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
e1812598 by Salvatore Bonaccorso at 2026-10-28T20:41:07+01:00
Process some new NFUs
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -85,7 +85,7 @@ CVE-2026-86377 (Dell PowerProtect Data Domain, Feature
Release versions 7.7.1.0
CVE-2026-85655 (The Enable Media Replace plugin for WordPress is vulnerable to
authori ...)
NOT-FOR-US: WordPress plugin
CVE-2026-84725 (when EAP runs with -secmgr, the openjdk-orb's JDKBridge
honours attack ...)
- TODO: check
+ NOT-FOR-US: Red Hat JBoss Enterprise Application Platform
CVE-2026-83525 (Incorrect operator (CWE-480) in the FetchSnapshot RPC handler
in Apach ...)
- kafka <itp> (bug #786460)
CVE-2026-82962 (ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c
can prepen ...)
@@ -97,9 +97,9 @@ CVE-2026-81472 (Dell iDRAC Service Module (iSM) for Windows,
Dell iDRAC Service
CVE-2026-79656 (A user with read access to Grafana's server logs, or to a log
store th ...)
NOT-FOR-US: Grafana
CVE-2026-6064 (Link following vulnerability in Data Shredder components in
Norton Ant ...)
- TODO: check
+ NOT-FOR-US: Norton Antivirus, Avast Antivirus, and AVG Internet Security
CVE-2026-67187 (Ninja Forms plugin for WordPress before 3.15.4 contains an
incomplete ...)
- TODO: check
+ NOT-FOR-US: WordPress plugin
CVE-2026-67080 (HCL BigFix AEX is affected by an Information Disclosure
vulnerability ...)
NOT-FOR-US: HCL
CVE-2026-67079 (HCL BigFix AEX is affected by a Clickjacking vulnerability,
which coul ...)
@@ -111,7 +111,7 @@ CVE-2026-67074 (HCL BigFix AEX is affected by a Remote Code
Execution Vulnerabil
CVE-2026-67073 (HCL BigFix AEX is affected by an Unrestricted File Upload and
Improper ...)
NOT-FOR-US: HCL
CVE-2026-59979 (YosemiteCrew provides organization-based service and task
management. ...)
- TODO: check
+ NOT-FOR-US: YosemiteCrew
CVE-2026-59959 (SAIL is a cross-platform library for loading and saving images
with su ...)
TODO: check
CVE-2026-59185 (identrail is a machine identity security platform for AWS,
GitHub/OIDC ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1812598e28e4f39f24ae0d5d231646653ece3fc
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e1812598e28e4f39f24ae0d5d231646653ece3fc
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
